Two leading US cybersecurity organizations are urging American businesses to brace for a potential wave of cyberattacks from Iran as the country is engaged in escalating hostilities with Israel.
The Information Technology — Information Sharing and Analysis Center (IT-ISAC) and the Food and Agriculture Information Sharing and Analysis Center (Food and Ag-ISAC) issued a joint statement last week warning that the conflict could trigger a surge in cyber activity from Iranian-linked actors targeting American companies.
“Historically, Iranian state-sponsored actors, pro-Iran hacktivist groups, and financially motivated cybercriminals have launched attacks against US organizations during periods of heightened conflict,” the statement said.
The two ISACs called on businesses across all sectors — especially those in critical infrastructure — to “take immediate steps to proactively assess their cyber preparedness, enhance their defenses, and prepare for a range of cyber activity, some of which could potentially be disruptive.”
Iranian-affiliated threat actors are known for their aggressive and adaptive tactics, techniques and procedures (TTPs) — a cybersecurity term that describes how hackers or cybercriminal groups plan and carry out attacks in the digital world.
The two cybersecurity groups emphasized the importance of raising internal awareness, boosting monitoring for suspicious behavior and training employees to report phishing emails and malicious links.
“Preparedness is critical to resilience,” the organizations wrote.
“Now is the time for companies to become familiar with Iranian-affiliated threat actors and their TTPs, assess their own cybersecurity posture, strengthen their defenses, begin heightened monitoring for suspicious activity, and remind employees to report suspicious emails and links.”
The ISACs also highlighted the risks of collateral damage, noting that attacks aimed directly at Israeli targets could inadvertently impact US companies through the global interconnectedness of digital networks.
“Even attacks not directly targeting the US could have indirect effects and cause disruptions to companies in the US,” the statement warned.
“It is possible that cyber attacks targeting Israel itself could cause collateral damage to US companies, even if the US companies themselves are not the intended target.”
Both organizations said they are continuing to monitor the situation and provide real-time intelligence to member companies. They noted that their member base is actively using tools such as adversary attack playbooks and secure collaboration channels to stay ahead of emerging threats.
“The Food and Ag-ISAC and IT-ISAC will continue to monitor the situation and provide timely intelligence updates as new threats emerge,” the statement read.
The alert comes as US critical infrastructure sectors remain on high alert amid rising global tensions. Both ISACs encourage companies not currently participating in their information-sharing networks to join voluntarily in order to strengthen the broader industry’s cyber defenses.
The Food and Ag-ISAC, launched in 2023, provides threat intelligence and incident response resources for the food and agriculture sector.
The IT-ISAC, founded in 2000, supports companies across the technology space with curated cyber threat analysis and collaborative security tools.
Iran’s Supreme Leader Ayatollah Ali Khamenei has vowed that the country “won’t surrender,” issuing a warning that any American military involvement would result in “irreparable consequences.”
His statement follows remarks from President Trump, who posted on social media that the US knows the whereabouts of Iran’s top leadership but has chosen not to act—before declaring, “UNCONDITIONAL SURRENDER!”
A White House official told the Wall Street Journal on Wednesday that Trump spoke by phone with Israeli Prime Minister Benjamin Netanyahu on Tuesday as military tensions escalated in the region.
In recent days, the US has reinforced its military presence near Iran, with a third Navy destroyer entering the eastern Mediterranean and a second aircraft carrier strike group en route to the Arabian Sea.
Although the Pentagon has described the deployments as defensive in nature, the positioning could serve dual purposes — either to enable a potential joint offensive with Israel or to increase pressure on Iran to back down or negotiate.
Fighting between Israel and Iran has intensified, with reports of mounting casualties. A human-rights group said the death toll in Iran has climbed above 450, while Israeli authorities have reported 24 deaths resulting from Iranian missile attacks.
The Post has sought comment from the Iranian government.
